Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-9013
7.5
HIGHCVSS v2
Published
December 9, 2016
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually specify a password in the database settings TEST dictionary.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.= 1.10, = 1.10.1, = 1.10.2, = 1.9.6, = 1.9.9, = 1.9.5, = 1.9.3, = 1.9.4, = 1.9.7, = 1.9.1, = 1.9, = 1.9.8, = 1.9.10, = 1.9.2, = 1.8.15, = 1.8.2, = 1.8.14, = 1.8.1, = 1.8.7, = 1.8.9, = 1.8.11, = 1.8.3, = 1.8.12, = 1.8.6, = 1.8.8, = 1.8, = 1.8.10, = 1.8.4, = 1.8.5, = 1.8.13NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.= 1.10, = 1.10.1, = 1.10.2, = 1.9.6, = 1.9.9, = 1.9.5, = 1.9.3, = 1.9.4, = 1.9.7, = 1.9.1, = 1.9, = 1.9.8, = 1.9.10, = 1.9.2, = 1.8.15, = 1.8.2, = 1.8.14, = 1.8.1, = 1.8.7, = 1.8.9, = 1.8.11, = 1.8.3, = 1.8.12, = 1.8.6, = 1.8.8, = 1.8, = 1.8.10, = 1.8.4, = 1.8.5, = 1.8.13NVD
Docker Hub
NPM
RubyGems